GNU Image Manipulation Program
gimp:gimp from the port| CVE-2025-5473 | 8.8 | 2025-06-06 | GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installation… |
| CVE-2025-2761 | 7.8 | 2025-04-23 | GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installat… |
| CVE-2025-2760 | 7.8 | 2025-04-23 | GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installation… |
| CVE-2026-82343 | 6.1 | 2026-08-28 | A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. T… |
| CVE-2026-82328 | 6.1 | 2026-08-28 | A flaw was found in the file-ico plugin in GIMP. When processing a specially crafted ICO image file, the plugin does not properly validate the used_clrs (palette count) … |
| CVE-2026-82330 | 6.1 | 2026-08-28 | A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ (compressed) decoder does not properly perform memory bounds … |
| CVE-2026-82324 | 6.1 | 2026-08-28 | A flaw was found in the file-iff (IFF/ILBM) plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row si… |
| CVE-2026-58381 | 6.1 | 2026-07-02 | A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This c… |
| CVE-2026-4887 | 6.1 | 2026-03-26 | A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a … |
| CVE-2026-79902 | 5.5 | 2026-08-26 | A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array (VLA) on the s… |
| CVE-2026-80101 | 4.4 | 2026-08-25 | A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters i… |
pkg audit reports nothing for this version.Change the shared library version number in the "gtk" dependency from 1.0 to just 1. The current version of the gtk port installs version 1.1 of the library, and it seems to work fine with gimp.937f05d736
Change JPEG shared library number to 9. This is to make sure that everyone installs the version of the port that uses shared library number 9 and the LIBRARY_VERSION set to the default. Normally this is against our policy (bumping the version number for minor things), however due to the major problems caused with the upgrade, Satoshi and I decided that this was best. Approved by: asami18f33c0f93
Upgrade to 0.99.28. PR: ports/6442 Submitted by: Donald Burr <dburr@POBoxes.com>d6fcd7b2c5
correct library dependency. we indeed have libjpeg.so.8.0, my fault.2eda704c1f
- tabify Makefile - configure doesn't detect libaa, added lib dependency for libaa - lib dependency for jpeg lib corrected, we still have libjpeg.so.7 not 8 - PLIST updatedd36424d2f3
upgrade to 0.99.26966f17d160
Switch remaining ports to use jpeg lib version 8.0.b5544f1358
upgrade png major574f6deb06
Thanks to Eivind, we now have the distfiles.5b22912c08
Mark this port broken, can't fetch.b781388c67
upgrade to 0.99.21, there'll be another port containing the ``unstable'' plug-ins soon.d24c98297a
Add tk virtual category where missing. List of ports which depend on tk but aren't in a tk virtual category from awk -F\| '$9 ~ /tk-/ && $7 !~ /tk/ {print $1}' INDEX
I didn't do anything about the ports which depend on things which depend
on a tk revision. I'd be afraid that the depended-upon port might change
and thus outdate the virtual category in the depender.f06d13b6ffRemove a reference to the gimp port, which no longer exists.fb0424338a
upgrade to 0.99.18 also add lib depends for xdelta, a binary file diff/patch/rcs type utilitiyd2217c7ef3
set LD for that stoopid libtool crap301b271aa6
upgrade to 0.99.173ba4c4d009
use tiff34 and fix path to sendmail Submitted by: Vanillae94e7c7e4e
install data stuffs in the right placeeaae9e00b4
upgrade to 0.99.166401ad5dce
Use new location for tiff34 headers.79fef7002a
fix one distfile Approved by: Satoshi1eca22557e
Add ${LOCALBASE}/include/{tcl8.0,tk8.0} to CPPFLAGS.
Use install-info in PLIST. This seems to need a bit more work,
but I don't get errors from the pkg_* tools so I left it in.
OK'd by: The Portsmeister0fa8533c72upgrade to 0.99.14 (I hope this works)451355f015
upgrade to 0.99.10, it's not perfect, but this is a developer's release55b39d3652
upgrade to 0.99.9, plus a bunch of patches from the list. Obtained from: gimp-devel mailing list, in partea49ae58d1
upgrade to 0.99.8f29e998960
damn, damn, damn, libgck slipped through the cracks... I'll have to pay more attention one of these days. Discovered by: Satoshi, of course5b00980048
upgrade to 0.99.714b3f0512e
patches that should have been committed yesterday Pointed-out-by: Satoshi33dc604e1b
upgrade to 0.99.6, plus a few patches from the gimp-developers listbad0638740
holy christmas... talk about a moving target. upgrade to 0.99.3093e12b880
oops, missed this oneea04630583
upgrade to 0.99.1acc2847217
more patches Obtained from: the gimp mailing list, and me199cd1a52c
Change jpeg major.300f10ff4d
fix DISTNAME so this thing builds13abfc0987
new port for the gimp developer's releasee50f501574